immi803
Senior Member
Same problem, nothing is working as it should like adblock etc, tried "unbound -dv" and here's the outcomeFurther to my earlier questions on the DNS firewall and VPN routing - see below - the DNS Firewall is now no longer working
Unbound works fine without it but if enable the Firewall then I get
Code:[1596135750] unbound-checkconf[5209:0] error: /opt/var/lib/unbound/rpz.urlhaus.abuse.ch.zone:1154 cannot insert RR of type CNAME [1596135750] unbound-checkconf[5209:0] error: error parsing zonefile /opt/var/lib/unbound/rpz.urlhaus.abuse.ch.zone for rpz.urlhaus.abuse.ch. [1596135750] unbound-checkconf[5209:0] fatal error: Could not setup authority zones ***ERROR INVALID unbound configuration
I have tried hard and soft reboots (just in case), as well as option i = Update and unbound and configuration, without success - any suggestions on what I can try next?
Earlier Post
Can someone help with a couple of questions - I think I have configured unbound correctly, but am not entirely sure with respect to the DNS Firewall and sending unbound requests via VPN Client.
With regards to the DNS Firewall, I can see this is enabled but there have been no hits at all since it was installed some weeks ago. Is there some way / site I can check this?
In respect of sending requests via a VPN client, in the Q&A it says
Q. Why does a DNS Leak test show my ISP assigned IP Address?
A. You are now your own recursive DNS resolver! - what other IP could possibly be shown? .... However, if you use a VPN Client, then you may opt to force unbound to bind to the VPN tunnel, so all unbound's DNS requests will be via the tunnel, so now your VPN assigned IP will be shown in a DNS Leak test.
I have most of my traffic going direct, but do have a VPN for a couple of devices. I have set unbound to use VPN 5, but in any leak test my DNS still shows as my local IP, not the VPN assigned IP - is this correct?
Code:
v = View ('/opt/var/lib/unbound/'unbound.conf)
e = Exit Script [?]
E:Option ==> 7
Do you want to enable DNS Firewall?
Reply 'y' or press [Enter] to skip
y
unbound_rpz.sh downloaded successfully
Custom '/opt/share/unbound/configs/rpzsites' already exists - 'rpzsites' download skipped
Created startup hook in services-start.
Created cron job.
Creating new unbound.conf.firewall file.
(unbound_rpz.sh): 5185 Attempting to Download 1 of 1 from https://urlhaus.abuse.ch/downloads/rpz/.
#=#=# ##O#-# 0.################ 23.############################################# 63.######################################################################## 100.0%
Adding zone rpz.urlhaus.abuse.ch to unbound.conf.firewall.
Installed.
Adding 'include: "/opt/share/unbound/configs/unbound.conf.firewall" to '/opt/var/lib/unbound/unbound.conf'
unbound DNS Firewall ENABLED
[1596155942] unbound-checkconf[5272:0] error: /opt/var/lib/unbound/rpz.urlhaus.abuse.ch.zone:1137 cannot insert RR of type CNAME
[1596155942] unbound-checkconf[5272:0] error: error parsing zonefile /opt/var/lib/unbound/rpz.urlhaus.abuse.ch.zone for rpz.urlhaus.abuse.ch.
[1596155942] unbound-checkconf[5272:0] fatal error: Could not setup authority zones
***ERROR requested re(Start) of unbound ABORTed! - use option 'vx' to correct 'unbound.conf' or 'rl' to load a valid configuration file
Router Configuration recommended pre-reqs status:
[✔] Swapfile=2097148 kB
[✔] DNS Filter=ON
[✔] DNS Filter=ROUTER
[✔] WAN: Use local caching DNS server as system resolver=NO
[✔] Entware NTP server is running
[✔] Enable DNS Rebind protection=NO
[✔] Enable DNSSEC support=NO
Options:
[✔] Ad and Tracker Blocking (No. of Adblock domains=58208,Blocked Hosts=0,Allowlist=19)
[✔] unbound CPU/Memory Performance tweaks
[✔] unbound-control FAST response ENABLED
[✔] DNS Firewall ENABLED
_
____ ____ | |_ ____ / _ | \| _)| \
( ( | | | | | |__| | | | \_||_|_|_|_|\___)_|_|_|
Goodbye
thunder@RT-AC68U-4370:/tmp/home/root# unbound -dv [1596155973] unbound[6342:0] notice: Start of unbound 1.10.1.
Jul 31 00:39:34 unbound[6342:0] error: can't bind socket: Address already in use for 127.0.0.1 port 53535 Jul 31 00:39:34 unbound[6342:0] fatal error: could not open ports
thunder@RT-AC68U-4370:/tmp/home/root#